@sardis/mcp-server 0.1.0

package/dist/tools/policy.js

@@ -0,0 +1,450 @@
+/**
+ * Sardis MCP Server - Policy Tools
+ *
+ * Tools for validating payments against spending policies.
+ */
+import { PolicyCheckSchema, ComplianceCheckSchema } from './types.js';
+import { apiRequest } from '../api.js';
+import { getConfig, getBlockedVendors, getAllowedVendors } from '../config.js';
+import { getWalletInfo } from './wallets.js';
+function derivePolicyReasonCode(result) {
+    if (result.allowed)
+        return 'SARDIS.POLICY.ALLOW';
+    const checks = result.checks || [];
+    if (checks.some((c) => c.name === 'per_transaction_limit' && !c.passed)) {
+        return 'SARDIS.POLICY.LIMIT_EXCEEDED';
+    }
+    if (checks.some((c) => c.name === 'vendor_allowlist' && !c.passed)) {
+        return 'SARDIS.POLICY.VENDOR_BLOCKED';
+    }
+    if (checks.some((c) => c.name === 'category_check' && !c.passed)) {
+        return 'SARDIS.POLICY.CATEGORY_BLOCKED';
+    }
+    return 'SARDIS.POLICY.DENY';
+}
+function buildPolicyDecision(result) {
+    const config = getConfig();
+    return {
+        decision_id: `dec_pol_${Date.now().toString(36)}${Math.random().toString(36).slice(2, 8)}`,
+        outcome: result.allowed ? 'APPROVED' : 'BLOCKED',
+        reason_code: derivePolicyReasonCode(result),
+        reason: result.reason || (result.allowed ? 'Allowed by policy' : 'Blocked by policy'),
+        context: {
+            agent_id: config.agentId || null,
+            wallet_id: config.walletId || null,
+            chain: config.chain,
+            mode: config.mode,
+            payment_identity_id: process.env.SARDIS_PAYMENT_IDENTITY || null,
+        },
+    };
+}
+/**
+ * Check policy via API or local validation
+ */
+export async function checkPolicy(vendor, amount, category) {
+    const config = getConfig();
+    const checks = [];
+    let allPassed = true;
+    try {
+        // Get wallet limits
+        const wallet = await getWalletInfo();
+        const limitPerTx = parseFloat(wallet.limit_per_tx);
+        // Per-transaction limit check
+        if (amount <= limitPerTx) {
+            checks.push({ name: 'per_transaction_limit', passed: true });
+        }
+        else {
+            checks.push({
+                name: 'per_transaction_limit',
+                passed: false,
+                reason: `Amount $${amount} exceeds limit of $${limitPerTx}`,
+            });
+            allPassed = false;
+        }
+        // Wallet active check
+        if (wallet.is_active) {
+            checks.push({ name: 'wallet_active', passed: true });
+        }
+        else {
+            checks.push({
+                name: 'wallet_active',
+                passed: false,
+                reason: 'Wallet is not active',
+            });
+            allPassed = false;
+        }
+        // Vendor validation using configurable lists
+        const normalizedVendor = vendor.toLowerCase().trim();
+        const blockedVendors = getBlockedVendors();
+        const allowedVendors = getAllowedVendors();
+        // SECURITY: Use exact match instead of substring to prevent bypass.
+        // Substring matching allows "aws-evil.com" to match "aws" on the allowlist,
+        // or "not-gambling-site" to match "gambling" on the blocklist.
+        const isBlocked = blockedVendors.some((b) => normalizedVendor === b.toLowerCase());
+        const isAllowed = allowedVendors.some((v) => normalizedVendor === v.toLowerCase());
+        if (isBlocked) {
+            checks.push({
+                name: 'vendor_allowlist',
+                passed: false,
+                reason: `Vendor "${vendor}" is blocked by policy`,
+            });
+            allPassed = false;
+        }
+        else if (isAllowed) {
+            checks.push({ name: 'vendor_allowlist', passed: true });
+        }
+        else {
+            // Unknown vendor - could require approval based on config
+            if (config.requireExplicitApproval) {
+                checks.push({
+                    name: 'vendor_allowlist',
+                    passed: false,
+                    reason: `Vendor "${vendor}" requires explicit approval`,
+                });
+                allPassed = false;
+            }
+            else {
+                checks.push({
+                    name: 'vendor_allowlist',
+                    passed: true,
+                    reason: 'Vendor not blocked, implicit approval',
+                });
+            }
+        }
+        // Category check if provided
+        if (category) {
+            const blockedCategories = (process.env.SARDIS_POLICY_BLOCKED_CATEGORIES || 'gambling,adult')
+                .split(',')
+                .map((c) => c.trim().toLowerCase());
+            if (blockedCategories.includes(category.toLowerCase())) {
+                checks.push({
+                    name: 'category_check',
+                    passed: false,
+                    reason: `Category "${category}" is not allowed`,
+                });
+                allPassed = false;
+            }
+            else {
+                checks.push({ name: 'category_check', passed: true });
+            }
+        }
+        return {
+            allowed: allPassed,
+            reason: allPassed
+                ? 'Payment allowed by policy'
+                : checks
+                    .filter((c) => !c.passed)
+                    .map((c) => c.reason)
+                    .join('; '),
+            risk_score: allPassed ? 0.1 : 0.8,
+            checks,
+        };
+    }
+    catch (error) {
+        return {
+            allowed: false,
+            reason: `Policy check failed: ${error instanceof Error ? error.message : 'Unknown error'}`,
+            risk_score: 1.0,
+        };
+    }
+}
+/**
+ * Validate payment limits only (without vendor checks)
+ */
+export async function validateLimits(amount) {
+    const checks = [];
+    let allPassed = true;
+    try {
+        const wallet = await getWalletInfo();
+        const limitPerTx = parseFloat(wallet.limit_per_tx);
+        const limitTotal = parseFloat(wallet.limit_total);
+        // Per-transaction limit
+        if (amount <= limitPerTx) {
+            checks.push({ name: 'per_transaction_limit', passed: true });
+        }
+        else {
+            checks.push({
+                name: 'per_transaction_limit',
+                passed: false,
+                reason: `Amount $${amount} exceeds per-transaction limit of $${limitPerTx}`,
+            });
+            allPassed = false;
+        }
+        // Total limit (if we could track cumulative - for now just note it)
+        checks.push({
+            name: 'total_limit_check',
+            passed: true,
+            reason: `Daily limit: $${limitTotal}`,
+        });
+        return {
+            allowed: allPassed,
+            reason: allPassed
+                ? 'Within spending limits'
+                : checks
+                    .filter((c) => !c.passed)
+                    .map((c) => c.reason)
+                    .join('; '),
+            risk_score: allPassed ? 0.1 : 0.7,
+            checks,
+        };
+    }
+    catch (error) {
+        return {
+            allowed: false,
+            reason: `Limit validation failed: ${error instanceof Error ? error.message : 'Unknown error'}`,
+            risk_score: 1.0,
+        };
+    }
+}
+/**
+ * Check compliance status
+ */
+export async function checkCompliance(address, amount) {
+    const config = getConfig();
+    if (!config.apiKey || config.mode === 'simulated') {
+        // Simulated compliance check
+        return {
+            status: 'pass',
+            checks: [
+                { type: 'sanctions', passed: true },
+                { type: 'kyc', passed: true },
+                { type: 'aml', passed: true },
+            ],
+            risk_level: 'low',
+        };
+    }
+    try {
+        return await apiRequest('POST', '/api/v2/compliance/check', {
+            address,
+            amount,
+        });
+    }
+    catch {
+        // Fail-closed on compliance errors
+        return {
+            status: 'fail',
+            checks: [{ type: 'error', passed: false, details: 'Compliance service unavailable' }],
+            risk_level: 'high',
+        };
+    }
+}
+// Tool definitions
+export const policyToolDefinitions = [
+    {
+        name: 'sardis_check_policy',
+        description: 'Check if a payment would be allowed by the current spending policy without executing it. Use this to validate payments before execution.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                vendor: {
+                    type: 'string',
+                    description: 'The merchant to check',
+                },
+                amount: {
+                    type: 'number',
+                    description: 'Payment amount to validate',
+                },
+                category: {
+                    type: 'string',
+                    description: 'Optional merchant category for additional validation',
+                },
+            },
+            required: ['vendor', 'amount'],
+        },
+    },
+    {
+        name: 'sardis_validate_limits',
+        description: 'Check if a payment amount is within wallet spending limits without checking vendor restrictions.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                amount: {
+                    type: 'number',
+                    description: 'Payment amount to validate against limits',
+                },
+            },
+            required: ['amount'],
+        },
+    },
+    {
+        name: 'sardis_check_compliance',
+        description: 'Run compliance checks on an address including sanctions, KYC, and AML screening.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                address: {
+                    type: 'string',
+                    description: 'The wallet address to check (0x...)',
+                },
+                amount: {
+                    type: 'number',
+                    description: 'Transaction amount for risk assessment',
+                },
+            },
+            required: ['address', 'amount'],
+        },
+    },
+    {
+        name: 'sardis_get_policies',
+        description: 'Get all active spending policies for the wallet.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                wallet_id: {
+                    type: 'string',
+                    description: 'Wallet ID (optional, defaults to configured wallet)',
+                },
+            },
+            required: [],
+        },
+    },
+    // SECURITY: sardis_get_rules has been removed from agent-facing tools.
+    // Exposing the full policy ruleset (vendor allowlists, blocklists, limits,
+    // approval thresholds) to AI agents enables prompt-injected agents to
+    // craft requests that precisely bypass policy boundaries.
+    // Policy rules are accessible only via the admin API.
+];
+// Tool handlers
+export const policyToolHandlers = {
+    sardis_check_policy: async (args) => {
+        const parsed = PolicyCheckSchema.safeParse(args);
+        if (!parsed.success) {
+            return {
+                content: [{ type: 'text', text: `Invalid request: ${parsed.error.message}` }],
+                isError: true,
+            };
+        }
+        const { vendor, amount, category } = parsed.data;
+        const result = await checkPolicy(vendor, amount, category);
+        const decision = buildPolicyDecision(result);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({
+                        vendor,
+                        amount,
+                        category: category || 'unspecified',
+                        allowed: result.allowed,
+                        reason: result.reason,
+                        reason_code: decision.reason_code,
+                        risk_score: result.risk_score,
+                        checks: result.checks,
+                        decision,
+                    }, null, 2),
+                },
+            ],
+        };
+    },
+    sardis_validate_limits: async (args) => {
+        const parsed = PolicyCheckSchema.pick({ amount: true }).safeParse(args);
+        if (!parsed.success) {
+            return {
+                content: [{ type: 'text', text: `Invalid request: ${parsed.error.message}` }],
+                isError: true,
+            };
+        }
+        const result = await validateLimits(parsed.data.amount);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({
+                        amount: parsed.data.amount,
+                        within_limits: result.allowed,
+                        reason: result.reason,
+                        checks: result.checks,
+                    }, null, 2),
+                },
+            ],
+        };
+    },
+    sardis_check_compliance: async (args) => {
+        const parsed = ComplianceCheckSchema.safeParse(args);
+        if (!parsed.success) {
+            return {
+                content: [{ type: 'text', text: `Invalid request: ${parsed.error.message}` }],
+                isError: true,
+            };
+        }
+        const result = await checkCompliance(parsed.data.address, parsed.data.amount);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({
+                        address: parsed.data.address,
+                        amount: parsed.data.amount,
+                        status: result.status,
+                        risk_level: result.risk_level,
+                        checks: result.checks,
+                    }, null, 2),
+                },
+            ],
+        };
+    },
+    sardis_get_policies: async (args) => {
+        const config = getConfig();
+        const walletId = typeof args === 'object' && args !== null && 'wallet_id' in args
+            ? args.wallet_id || config.walletId
+            : config.walletId;
+        if (!config.apiKey || config.mode === 'simulated') {
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify({
+                            wallet_id: walletId,
+                            policies: [{
+                                    id: 'policy_default',
+                                    name: 'Default Spending Policy',
+                                    max_per_tx: '100.00',
+                                    max_daily: '500.00',
+                                    max_monthly: '5000.00',
+                                    is_active: true,
+                                    created_at: new Date().toISOString(),
+                                }],
+                        }, null, 2),
+                    }],
+            };
+        }
+        try {
+            const wallet = await getWalletInfo();
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify({
+                            wallet_id: wallet.id,
+                            policies: [{
+                                    id: 'policy_active',
+                                    name: 'Active Policy',
+                                    max_per_tx: wallet.limit_per_tx,
+                                    max_daily: wallet.limit_total,
+                                    is_active: wallet.is_active,
+                                }],
+                        }, null, 2),
+                    }],
+            };
+        }
+        catch (error) {
+            return {
+                content: [{
+                        type: 'text',
+                        text: `Failed to get policies: ${error instanceof Error ? error.message : 'Unknown error'}`,
+                    }],
+                isError: true,
+            };
+        }
+    },
+    // SECURITY: sardis_get_rules handler removed — see tool definition comment above.
+    sardis_get_rules: async (_args) => ({
+        content: [{
+                type: 'text',
+                text: JSON.stringify({
+                    error: 'Policy rule details are not available to AI agents for security reasons. '
+                        + 'Use sardis_check_policy to verify if a specific payment would be allowed.',
+                }),
+            }],
+        isError: true,
+    }),
+};
+//# sourceMappingURL=policy.js.map

package/dist/tools/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/tools/policy.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAkC7C,SAAS,sBAAsB,CAAC,MAAoB;IAClD,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,qBAAqB,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IACnC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,uBAAuB,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACxE,OAAO,8BAA8B,CAAC;IACxC,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,OAAO,8BAA8B,CAAC;IACxC,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACjE,OAAO,gCAAgC,CAAC;IAC1C,CAAC;IACD,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAoB;IAC/C,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,OAAO;QACL,WAAW,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QAC1F,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QAChD,WAAW,EAAE,sBAAsB,CAAC,MAAM,CAAC;QAC3C,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,mBAAmB,CAAC;QACrF,OAAO,EAAE;YACP,QAAQ,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;YAChC,SAAS,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;YAClC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,IAAI;SACjE;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAc,EACd,MAAc,EACd,QAAiB;IAEjB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAyD,EAAE,CAAC;IACxE,IAAI,SAAS,GAAG,IAAI,CAAC;IAErB,IAAI,CAAC;QACH,oBAAoB;QACpB,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAEnD,8BAA8B;QAC9B,IAAI,MAAM,IAAI,UAAU,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,uBAAuB;gBAC7B,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,WAAW,MAAM,sBAAsB,UAAU,EAAE;aAC5D,CAAC,CAAC;YACH,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;QAED,sBAAsB;QACtB,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,eAAe;gBACrB,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,sBAAsB;aAC/B,CAAC,CAAC;YACH,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;QAED,6CAA6C;QAC7C,MAAM,gBAAgB,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QACrD,MAAM,cAAc,GAAG,iBAAiB,EAAE,CAAC;QAC3C,MAAM,cAAc,GAAG,iBAAiB,EAAE,CAAC;QAE3C,oEAAoE;QACpE,4EAA4E;QAC5E,+DAA+D;QAC/D,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACnF,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAEnF,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,WAAW,MAAM,wBAAwB;aAClD,CAAC,CAAC;YACH,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;aAAM,IAAI,SAAS,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,0DAA0D;YAC1D,IAAI,MAAM,CAAC,uBAAuB,EAAE,CAAC;gBACnC,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,kBAAkB;oBACxB,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,WAAW,MAAM,8BAA8B;iBACxD,CAAC,CAAC;gBACH,SAAS,GAAG,KAAK,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,kBAAkB;oBACxB,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,uCAAuC;iBAChD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,iBAAiB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gCAAgC,IAAI,gBAAgB,CAAC;iBACzF,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YAEtC,IAAI,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACvD,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,gBAAgB;oBACtB,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,aAAa,QAAQ,kBAAkB;iBAChD,CAAC,CAAC;gBACH,SAAS,GAAG,KAAK,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE,SAAS;gBACf,CAAC,CAAC,2BAA2B;gBAC7B,CAAC,CAAC,MAAM;qBACH,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;qBACxB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;qBACpB,IAAI,CAAC,IAAI,CAAC;YACjB,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;YACjC,MAAM;SACP,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,wBAAwB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE;YAC1F,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAc;IACjD,MAAM,MAAM,GAAyD,EAAE,CAAC;IACxE,IAAI,SAAS,GAAG,IAAI,CAAC;IAErB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAElD,wBAAwB;QACxB,IAAI,MAAM,IAAI,UAAU,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,uBAAuB;gBAC7B,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,WAAW,MAAM,sCAAsC,UAAU,EAAE;aAC5E,CAAC,CAAC;YACH,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;QAED,oEAAoE;QACpE,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,iBAAiB,UAAU,EAAE;SACtC,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE,SAAS;gBACf,CAAC,CAAC,wBAAwB;gBAC1B,CAAC,CAAC,MAAM;qBACH,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;qBACxB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;qBACpB,IAAI,CAAC,IAAI,CAAC;YACjB,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;YACjC,MAAM;SACP,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,4BAA4B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE;YAC9F,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAe,EACf,MAAc;IAEd,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAClD,6BAA6B;QAC7B,OAAO;YACL,MAAM,EAAE,MAAM;YACd,MAAM,EAAE;gBACN,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE;gBACnC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;gBAC7B,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;aAC9B;YACD,UAAU,EAAE,KAAK;SAClB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,UAAU,CAAmB,MAAM,EAAE,0BAA0B,EAAE;YAC5E,OAAO;YACP,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;QACnC,OAAO;YACL,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;YACrF,UAAU,EAAE,MAAM;SACnB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,mBAAmB;AACnB,MAAM,CAAC,MAAM,qBAAqB,GAAqB;IACrD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EACT,0IAA0I;QAC5I,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,uBAAuB;iBACrC;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,4BAA4B;iBAC1C;gBACD,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,sDAAsD;iBACpE;aACF;YACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;SAC/B;KACF;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EACT,kGAAkG;QACpG,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,2CAA2C;iBACzD;aACF;YACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;SACrB;KACF;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EACT,kFAAkF;QACpF,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,qCAAqC;iBACnD;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,wCAAwC;iBACtD;aACF;YACD,QAAQ,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;SAChC;KACF;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EACT,kDAAkD;QACpD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,SAAS,EAAE;oBACT,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,qDAAqD;iBACnE;aACF;YACD,QAAQ,EAAE,EAAE;SACb;KACF;IACD,uEAAuE;IACvE,2EAA2E;IAC3E,sEAAsE;IACtE,0DAA0D;IAC1D,sDAAsD;CACvD,CAAC;AAEF,gBAAgB;AAChB,MAAM,CAAC,MAAM,kBAAkB,GAAgC;IAC7D,mBAAmB,EAAE,KAAK,EAAE,IAAa,EAAuB,EAAE;QAChE,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC7E,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAE7C,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;wBACE,MAAM;wBACN,MAAM;wBACN,QAAQ,EAAE,QAAQ,IAAI,aAAa;wBACnC,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;wBACjC,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,QAAQ;qBACT,EACD,IAAI,EACJ,CAAC,CACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAED,sBAAsB,EAAE,KAAK,EAAE,IAAa,EAAuB,EAAE;QACnE,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC7E,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAExD,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;wBACE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;wBAC1B,aAAa,EAAE,MAAM,CAAC,OAAO;wBAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;qBACtB,EACD,IAAI,EACJ,CAAC,CACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAED,uBAAuB,EAAE,KAAK,EAAE,IAAa,EAAuB,EAAE;QACpE,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC7E,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE9E,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;wBACE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;wBAC5B,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;wBAC1B,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;qBACtB,EACD,IAAI,EACJ,CAAC,CACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAED,mBAAmB,EAAE,KAAK,EAAE,IAAa,EAAuB,EAAE;QAChE,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,WAAW,IAAI,IAAI;YAC/E,CAAC,CAAE,IAA+B,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ;YAC/D,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;QAEpB,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAClD,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,SAAS,EAAE,QAAQ;4BACnB,QAAQ,EAAE,CAAC;oCACT,EAAE,EAAE,gBAAgB;oCACpB,IAAI,EAAE,yBAAyB;oCAC/B,UAAU,EAAE,QAAQ;oCACpB,SAAS,EAAE,QAAQ;oCACnB,WAAW,EAAE,SAAS;oCACtB,SAAS,EAAE,IAAI;oCACf,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iCACrC,CAAC;yBACH,EAAE,IAAI,EAAE,CAAC,CAAC;qBACZ,CAAC;aACH,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;YACrC,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,SAAS,EAAE,MAAM,CAAC,EAAE;4BACpB,QAAQ,EAAE,CAAC;oCACT,EAAE,EAAE,eAAe;oCACnB,IAAI,EAAE,eAAe;oCACrB,UAAU,EAAE,MAAM,CAAC,YAAY;oCAC/B,SAAS,EAAE,MAAM,CAAC,WAAW;oCAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;iCAC5B,CAAC;yBACH,EAAE,IAAI,EAAE,CAAC,CAAC;qBACZ,CAAC;aACH,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE;qBAC5F,CAAC;gBACF,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,gBAAgB,EAAE,KAAK,EAAE,KAAc,EAAuB,EAAE,CAAC,CAAC;QAChE,OAAO,EAAE,CAAC;gBACR,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,KAAK,EAAE,2EAA2E;0BAC9E,2EAA2E;iBAChF,CAAC;aACH,CAAC;QACF,OAAO,EAAE,IAAI;KACd,CAAC;CACH,CAAC"}

package/dist/tools/spending.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Spending Reports tools for MCP server
+ *
+ * Tools for getting spending analytics and reports.
+ */
+import type { ToolDefinition, ToolHandler } from './types.js';
+export declare const spendingToolDefinitions: ToolDefinition[];
+export declare const spendingToolHandlers: Record<string, ToolHandler>;
+//# sourceMappingURL=spending.d.ts.map

package/dist/tools/spending.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spending.d.ts","sourceRoot":"","sources":["../../src/tools/spending.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAuD1E,eAAO,MAAM,uBAAuB,EAAE,cAAc,EAoFnD,CAAC;AAGF,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAoO5D,CAAC"}